Search found 11 matches

by grahamperrin
Sun Mar 29, 2020 1:40 am
Forum: NoScript General
Topic: NoScript as an attack surface: review of a 2013 quote
Replies: 4
Views: 22298

Re: NoScript as an attack surface: review of a 2013 quote

Thanks

With apologies for a late response (I must have overlooked an e-mail notification):
barbaz wrote: Tue Jan 07, 2020 1:42 am Not a reasonable assumption.
I struck through that part of my answer in Stack Exchange.
by grahamperrin
Sun Mar 29, 2020 1:26 am
Forum: NoScript General
Topic: Bookmarklets, non-trusted sites, Firefox ESR 68 and Waterfox Current
Replies: 3
Views: 20217

Bookmarklets, non-trusted sites, Firefox ESR 68 and Waterfox Current

For example, the first bookmarklet at JavaScript Tricks: Edit Websites in Browser (Live) The behaviour of Waterfox Current 2020.03 is – as expected – consistent with the behaviour of Firefox ESR 68.6.0esr (64-bit): for an untrusted site, the bookmarklet does not work. With NoScript 11.0.23 added to ...
by grahamperrin
Mon Jan 06, 2020 6:29 am
Forum: NoScript General
Topic: NoScript as an attack surface: review of a 2013 quote
Replies: 4
Views: 22298

Re: NoScript as an attack surface: review of a 2013 quote

Thanks, was my response reasonable?
by grahamperrin
Sun Jan 05, 2020 4:25 pm
Forum: NoScript General
Topic: NoScript as an attack surface: review of a 2013 quote
Replies: 4
Views: 22298

NoScript as an attack surface: review of a 2013 quote

A January 2013 answer in Information Security Stack Exchange , part of which was quoted in a November 2019 question : Take into consideration that NoScript will also increase the attack surface My response: https://security.stackexchange.com/a/223723/13575 – the second part of the answer (below the ...
by grahamperrin
Sun Jan 05, 2020 3:47 pm
Forum: NoScript Development
Topic: Non-registrations and losses of service workers
Replies: 3
Views: 8535

Losses of service workers

storage.googleapis.com
Excellent. Thanks for the explanation!

Now I need to discover what causes losses – https://discourse.mozilla.org/t/-/51431 ... ahamperrin
by grahamperrin
Sun Jan 05, 2020 12:44 pm
Forum: NoScript Development
Topic: Non-registrations and losses of service workers
Replies: 3
Views: 8535

Clarification

With a different profile, testing NoScript alone, I find prevention of registration but not loss of registered service workers. Screen recording: https://s.put.re/Nyu3Ek5J.mp4 If there's a way for NoScript to allow registration , this will be a step towards helping me to identify what may be partly ...
by grahamperrin
Sun Jan 05, 2020 9:32 am
Forum: NoScript Development
Topic: Non-registrations and losses of service workers
Replies: 3
Views: 8535

Non-registrations and losses of service workers

NoScript 11.0.11 with Firefox 72.0: service workers are lost, I see no way to prevent the loss.

Please, is this a known issue?

Background (before I identified NoScript as a cause): Absence of service workers in Firefox 72 : firefox
by grahamperrin
Sun Jan 05, 2020 9:20 am
Forum: NoScript Support
Topic: googletagmanager.com
Replies: 1
Views: 1630

googletagmanager.com

Road Trip – https://roadtrip.glitch.me/ When googletagmanager.com is blocked, there's no hint of the block in the main icon: https://s.put.re/yWd54iaJ.com.png Is this expected? NoScript 11.0.11 with Firefox 72.0: no hint. NoScript 5.1.9 with home-built Waterfox Classic 2019.12 (20200103060435): work...
by grahamperrin
Sun Jan 27, 2019 5:45 pm
Forum: Web Tech
Topic: TLS 1.0 and 1.1 are slated for the chopping block
Replies: 7
Views: 83757

Re: TLS 1.0 and 1.1 are slated for the chopping block

barbaz wrote: Fri Oct 19, 2018 8:24 pm … status of TLS 1.3 support in Waterfox. It's at least not enabled by default.

(FWIW Waterfox about:support says it uses NSS version 3.32.1) …
Hi, FYI https://github.com/MrAlex94/Waterfox/is ... -449894974